mirror of
https://github.com/isc-projects/bind9.git
synced 2026-04-15 22:09:31 -04:00
Add configuration that causes setnsec3param hang
Add a zone to the configuration file that uses NSEC3 with dnssec-policy and fails to load. This will cause setnsec3param to go into a busy wait and will cause a hang on shutdown.
This commit is contained in:
parent
33394f11c3
commit
3631a23c7f
3 changed files with 18 additions and 0 deletions
|
|
@ -117,3 +117,11 @@ zone "nsec3-to-nsec.kasp" {
|
|||
//dnssec-policy "nsec3";
|
||||
dnssec-policy "nsec";
|
||||
};
|
||||
|
||||
/* Add a zone that fails to load, should not prevent shutdown. */
|
||||
zone "nsec3-fails-to-load.kasp" {
|
||||
type primary;
|
||||
file "nsec3-fails-to-load.kasp.db";
|
||||
dnssec-policy "nsec3";
|
||||
allow-update { any; };
|
||||
};
|
||||
|
|
|
|||
|
|
@ -0,0 +1,8 @@
|
|||
@ IN SOA kasp. nsec3-fails-to-load.kasp. (
|
||||
1 ; serial
|
||||
30 ; refresh (30 seconds)
|
||||
10 ; retry (10 seconds)
|
||||
3600000 ; expire (5 weeks 6 days 16 hours)
|
||||
300 ; minimum (5 minutes)
|
||||
)
|
||||
NS nsec3-fails-to-load.kasp.
|
||||
|
|
@ -27,3 +27,5 @@ for zn in nsec-to-nsec3 nsec3 nsec3-other nsec3-change nsec3-to-nsec \
|
|||
do
|
||||
setup "${zn}.kasp"
|
||||
done
|
||||
|
||||
cp nsec3-fails-to-load.kasp.db.in nsec3-fails-to-load.kasp.db
|
||||
|
|
|
|||
Loading…
Reference in a new issue